is passing record id in asp.net Ajax data property a secure way , is there any alternative way to pass record id from javascript to webservice , so the user don't change the record id in between and update record he is not authurized to do so
i have a scenario where the user like a post and i pass record id to web service , since the record id is readonly to user the user can change the record id .
$.ajax({
url : 'Webservice.asmx/' + WebServiceFunctionName + '',
data : JSON.stringify(data),
success : function(data) {
ReturnedData = data.hasOwnProperty("d") ? data.d : data;
}
do i need to handle this through the store procedure , or is there any alternative.
does asp.net data controls encrypt record id , do i need to change the html table to server control ?
let me know if i am still not clear...